auth

type ApproveDeviceAuthorizationJSONRequestBody = DeviceAuthorizationApproveRequest

type ApproveDeviceAuthorizationParams struct {
	// XRequestID Optional client-supplied correlation identifier.
	XRequestID *XRequestID `json:"X-Request-ID,omitempty"`

	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type ApproveDeviceAuthorizationResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	ApplicationproblemJSON400 *BadRequest
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON409 *Conflict
	ApplicationproblemJSON410 *Gone
	ApplicationproblemJSON429 *TooManyRequests
}

type AttestedKeyCertificate struct {
	// AttestationBytes Base64url-encoded 136-byte AttestationV1 blob.
	AttestationBytes string `json:"attestation_bytes"`

	// AttestationSignature Base64url-encoded 64-byte raw r||s ECDSA P-256 signature over SHA-256(attestation_bytes).
	AttestationSignature string             `json:"attestation_signature"`
	CertificateId        openapi_types.UUID `json:"certificate_id"`

	// DeviceKeyId ID of the device signing key the certificate was issued for.
	DeviceKeyId openapi_types.UUID `json:"device_key_id"`
	ExpiresAt   time.Time          `json:"expires_at"`
	IssuedAt    time.Time          `json:"issued_at"`

	// IssuerKeyId kid of the issuer key that signed this attestation.
	IssuerKeyId   string `json:"issuer_key_id"`
	PolicyVersion int32  `json:"policy_version"`
}

type AttestedKeyConfig struct {
	// ActiveKid kid of the issuer key currently used for new attestations.
	ActiveKid string `json:"active_kid"`

	// AppIdHash Base64url SHA-256 of the configured AKZK app identifier.
	AppIdHash string `json:"app_id_hash"`

	// CircuitIdHex Lowercase hex circuit ID computed by attestedkeyzk.CircuitID at server startup.
	CircuitIdHex  string                 `json:"circuit_id_hex"`
	IssuerKeys    []AttestedKeyIssuerKey `json:"issuer_keys"`
	PolicyVersion int32                  `json:"policy_version"`
}

type AttestedKeyIssuerKey struct {
	Kid string `json:"kid"`

	// PubX Base64url 32-byte big-endian P-256 x coordinate.
	PubX string `json:"pub_x"`

	// PubY Base64url 32-byte big-endian P-256 y coordinate.
	PubY string `json:"pub_y"`
}

type BadGateway = ProblemDetails

type BadRequest = ProblemDetails

type ChallengeResponse struct {
	ChallengeId string    `json:"challenge_id"`
	ExpiresAt   time.Time `json:"expires_at"`

	// Nonce Base64url random nonce.
	Nonce string `json:"nonce"`
}

type ClaimDeviceAuthorizationJSONRequestBody = DeviceAuthorizationApproveRequest

type ClaimDeviceAuthorizationParams struct {
	// XRequestID Optional client-supplied correlation identifier.
	XRequestID *XRequestID `json:"X-Request-ID,omitempty"`

	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type ClaimDeviceAuthorizationResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *DeviceAuthorizationClaimResponse
	ApplicationproblemJSON400 *BadRequest
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON409 *Conflict
	ApplicationproblemJSON410 *Gone
	ApplicationproblemJSON429 *TooManyRequests
}

type Client struct {
	// The endpoint of the server conforming to this interface, with scheme,
	// https://api.deepmap.com for example. This can contain a path relative
	// to the server, such as https://api.deepmap.com/dev-test, and all the
	// paths in the swagger spec will be appended to the server.
	Server string

	// Doer for performing requests, typically a *http.Client with any
	// customized settings, such as certificate chains.
	Client HttpRequestDoer

	// A list of callbacks for modifying requests which are generated before sending over
	// the network.
	RequestEditors []RequestEditorFn
}

type ClientInterface interface {
	// GetAttestedKeyConfig request
	GetAttestedKeyConfig(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// RefreshAttestedKey request
	RefreshAttestedKey(ctx context.Context, params *RefreshAttestedKeyParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetChallenge request
	GetChallenge(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// ApproveDeviceAuthorizationWithBody request with any body
	ApproveDeviceAuthorizationWithBody(ctx context.Context, params *ApproveDeviceAuthorizationParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	ApproveDeviceAuthorization(ctx context.Context, params *ApproveDeviceAuthorizationParams, body ApproveDeviceAuthorizationJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// ClaimDeviceAuthorizationWithBody request with any body
	ClaimDeviceAuthorizationWithBody(ctx context.Context, params *ClaimDeviceAuthorizationParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	ClaimDeviceAuthorization(ctx context.Context, params *ClaimDeviceAuthorizationParams, body ClaimDeviceAuthorizationJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DenyDeviceAuthorizationWithBody request with any body
	DenyDeviceAuthorizationWithBody(ctx context.Context, params *DenyDeviceAuthorizationParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	DenyDeviceAuthorization(ctx context.Context, params *DenyDeviceAuthorizationParams, body DenyDeviceAuthorizationJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetDeviceAuthorizationStatus request
	GetDeviceAuthorizationStatus(ctx context.Context, deviceCode string, params *GetDeviceAuthorizationStatusParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// ListDevices request
	ListDevices(ctx context.Context, params *ListDevicesParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DeleteDevice request
	DeleteDevice(ctx context.Context, id string, params *DeleteDeviceParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetDevice request
	GetDevice(ctx context.Context, id string, params *GetDeviceParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostLinkCheckWithBody request with any body
	PostLinkCheckWithBody(ctx context.Context, params *PostLinkCheckParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	PostLinkCheck(ctx context.Context, params *PostLinkCheckParams, body PostLinkCheckJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostLinkFinalizeWithBody request with any body
	PostLinkFinalizeWithBody(ctx context.Context, params *PostLinkFinalizeParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	PostLinkFinalize(ctx context.Context, params *PostLinkFinalizeParams, body PostLinkFinalizeJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostLinkRejectWithBody request with any body
	PostLinkRejectWithBody(ctx context.Context, params *PostLinkRejectParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	PostLinkReject(ctx context.Context, params *PostLinkRejectParams, body PostLinkRejectJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostLinkStartWithBody request with any body
	PostLinkStartWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	PostLinkStart(ctx context.Context, body PostLinkStartJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetMe request
	GetMe(ctx context.Context, params *GetMeParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// CompleteOIDCAuthRequest request
	CompleteOIDCAuthRequest(ctx context.Context, id string, params *CompleteOIDCAuthRequestParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// StartPairingWithBody request with any body
	StartPairingWithBody(ctx context.Context, params *StartPairingParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	StartPairing(ctx context.Context, params *StartPairingParams, body StartPairingJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// ListPendingPairings request
	ListPendingPairings(ctx context.Context, params *ListPendingPairingsParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetPairingTransaction request
	GetPairingTransaction(ctx context.Context, id openapi_types.UUID, params *GetPairingTransactionParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// ConfirmPairingWithBody request with any body
	ConfirmPairingWithBody(ctx context.Context, id openapi_types.UUID, params *ConfirmPairingParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	ConfirmPairing(ctx context.Context, id openapi_types.UUID, params *ConfirmPairingParams, body ConfirmPairingJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DenyPairing request
	DenyPairing(ctx context.Context, id openapi_types.UUID, params *DenyPairingParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// SubmitPairingPubkeyWithBody request with any body
	SubmitPairingPubkeyWithBody(ctx context.Context, id openapi_types.UUID, params *SubmitPairingPubkeyParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	SubmitPairingPubkey(ctx context.Context, id openapi_types.UUID, params *SubmitPairingPubkeyParams, body SubmitPairingPubkeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// IssuePairingToken request
	IssuePairingToken(ctx context.Context, id openapi_types.UUID, params *IssuePairingTokenParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// ListPairings request
	ListPairings(ctx context.Context, params *ListPairingsParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// RevokePairing request
	RevokePairing(ctx context.Context, id string, params *RevokePairingParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// CreatePrivilegedActionIntentWithBody request with any body
	CreatePrivilegedActionIntentWithBody(ctx context.Context, params *CreatePrivilegedActionIntentParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	CreatePrivilegedActionIntent(ctx context.Context, params *CreatePrivilegedActionIntentParams, body CreatePrivilegedActionIntentJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetPrivilegedActionIntent request
	GetPrivilegedActionIntent(ctx context.Context, id string, params *GetPrivilegedActionIntentParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostRegisterWithBody request with any body
	PostRegisterWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	PostRegister(ctx context.Context, body PostRegisterJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostReloginWithBody request with any body
	PostReloginWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	PostRelogin(ctx context.Context, body PostReloginJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostRelyingPartyWithBody request with any body
	PostRelyingPartyWithBody(ctx context.Context, params *PostRelyingPartyParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	PostRelyingParty(ctx context.Context, params *PostRelyingPartyParams, body PostRelyingPartyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostRelyingPartyRotateSecret request
	PostRelyingPartyRotateSecret(ctx context.Context, id string, params *PostRelyingPartyRotateSecretParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetOpenidConfiguration request
	GetOpenidConfiguration(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetAuthorize request
	GetAuthorize(ctx context.Context, params *GetAuthorizeParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostDeviceAuthorizationWithBody request with any body
	PostDeviceAuthorizationWithBody(ctx context.Context, params *PostDeviceAuthorizationParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	PostDeviceAuthorization(ctx context.Context, params *PostDeviceAuthorizationParams, body PostDeviceAuthorizationJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	PostDeviceAuthorizationWithFormdataBody(ctx context.Context, params *PostDeviceAuthorizationParams, body PostDeviceAuthorizationFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetJWKS request
	GetJWKS(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostTokenWithBody request with any body
	PostTokenWithBody(ctx context.Context, params *PostTokenParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	PostTokenWithFormdataBody(ctx context.Context, params *PostTokenParams, body PostTokenFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetUserinfo request
	GetUserinfo(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)
}

type ClientOption func(*Client) error

type ClientWithResponses struct {
	ClientInterface
}

type ClientWithResponsesInterface interface {
	// GetAttestedKeyConfigWithResponse request
	GetAttestedKeyConfigWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetAttestedKeyConfigResp, error)

	// RefreshAttestedKeyWithResponse request
	RefreshAttestedKeyWithResponse(ctx context.Context, params *RefreshAttestedKeyParams, reqEditors ...RequestEditorFn) (*RefreshAttestedKeyResp, error)

	// GetChallengeWithResponse request
	GetChallengeWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetChallengeResp, error)

	// ApproveDeviceAuthorizationWithBodyWithResponse request with any body
	ApproveDeviceAuthorizationWithBodyWithResponse(ctx context.Context, params *ApproveDeviceAuthorizationParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*ApproveDeviceAuthorizationResp, error)

	ApproveDeviceAuthorizationWithResponse(ctx context.Context, params *ApproveDeviceAuthorizationParams, body ApproveDeviceAuthorizationJSONRequestBody, reqEditors ...RequestEditorFn) (*ApproveDeviceAuthorizationResp, error)

	// ClaimDeviceAuthorizationWithBodyWithResponse request with any body
	ClaimDeviceAuthorizationWithBodyWithResponse(ctx context.Context, params *ClaimDeviceAuthorizationParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*ClaimDeviceAuthorizationResp, error)

	ClaimDeviceAuthorizationWithResponse(ctx context.Context, params *ClaimDeviceAuthorizationParams, body ClaimDeviceAuthorizationJSONRequestBody, reqEditors ...RequestEditorFn) (*ClaimDeviceAuthorizationResp, error)

	// DenyDeviceAuthorizationWithBodyWithResponse request with any body
	DenyDeviceAuthorizationWithBodyWithResponse(ctx context.Context, params *DenyDeviceAuthorizationParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*DenyDeviceAuthorizationResp, error)

	DenyDeviceAuthorizationWithResponse(ctx context.Context, params *DenyDeviceAuthorizationParams, body DenyDeviceAuthorizationJSONRequestBody, reqEditors ...RequestEditorFn) (*DenyDeviceAuthorizationResp, error)

	// GetDeviceAuthorizationStatusWithResponse request
	GetDeviceAuthorizationStatusWithResponse(ctx context.Context, deviceCode string, params *GetDeviceAuthorizationStatusParams, reqEditors ...RequestEditorFn) (*GetDeviceAuthorizationStatusResp, error)

	// ListDevicesWithResponse request
	ListDevicesWithResponse(ctx context.Context, params *ListDevicesParams, reqEditors ...RequestEditorFn) (*ListDevicesResp, error)

	// DeleteDeviceWithResponse request
	DeleteDeviceWithResponse(ctx context.Context, id string, params *DeleteDeviceParams, reqEditors ...RequestEditorFn) (*DeleteDeviceResp, error)

	// GetDeviceWithResponse request
	GetDeviceWithResponse(ctx context.Context, id string, params *GetDeviceParams, reqEditors ...RequestEditorFn) (*GetDeviceResp, error)

	// PostLinkCheckWithBodyWithResponse request with any body
	PostLinkCheckWithBodyWithResponse(ctx context.Context, params *PostLinkCheckParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostLinkCheckResp, error)

	PostLinkCheckWithResponse(ctx context.Context, params *PostLinkCheckParams, body PostLinkCheckJSONRequestBody, reqEditors ...RequestEditorFn) (*PostLinkCheckResp, error)

	// PostLinkFinalizeWithBodyWithResponse request with any body
	PostLinkFinalizeWithBodyWithResponse(ctx context.Context, params *PostLinkFinalizeParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostLinkFinalizeResp, error)

	PostLinkFinalizeWithResponse(ctx context.Context, params *PostLinkFinalizeParams, body PostLinkFinalizeJSONRequestBody, reqEditors ...RequestEditorFn) (*PostLinkFinalizeResp, error)

	// PostLinkRejectWithBodyWithResponse request with any body
	PostLinkRejectWithBodyWithResponse(ctx context.Context, params *PostLinkRejectParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostLinkRejectResp, error)

	PostLinkRejectWithResponse(ctx context.Context, params *PostLinkRejectParams, body PostLinkRejectJSONRequestBody, reqEditors ...RequestEditorFn) (*PostLinkRejectResp, error)

	// PostLinkStartWithBodyWithResponse request with any body
	PostLinkStartWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostLinkStartResp, error)

	PostLinkStartWithResponse(ctx context.Context, body PostLinkStartJSONRequestBody, reqEditors ...RequestEditorFn) (*PostLinkStartResp, error)

	// GetMeWithResponse request
	GetMeWithResponse(ctx context.Context, params *GetMeParams, reqEditors ...RequestEditorFn) (*GetMeResp, error)

	// CompleteOIDCAuthRequestWithResponse request
	CompleteOIDCAuthRequestWithResponse(ctx context.Context, id string, params *CompleteOIDCAuthRequestParams, reqEditors ...RequestEditorFn) (*CompleteOIDCAuthRequestResp, error)

	// StartPairingWithBodyWithResponse request with any body
	StartPairingWithBodyWithResponse(ctx context.Context, params *StartPairingParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*StartPairingResp, error)

	StartPairingWithResponse(ctx context.Context, params *StartPairingParams, body StartPairingJSONRequestBody, reqEditors ...RequestEditorFn) (*StartPairingResp, error)

	// ListPendingPairingsWithResponse request
	ListPendingPairingsWithResponse(ctx context.Context, params *ListPendingPairingsParams, reqEditors ...RequestEditorFn) (*ListPendingPairingsResp, error)

	// GetPairingTransactionWithResponse request
	GetPairingTransactionWithResponse(ctx context.Context, id openapi_types.UUID, params *GetPairingTransactionParams, reqEditors ...RequestEditorFn) (*GetPairingTransactionResp, error)

	// ConfirmPairingWithBodyWithResponse request with any body
	ConfirmPairingWithBodyWithResponse(ctx context.Context, id openapi_types.UUID, params *ConfirmPairingParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*ConfirmPairingResp, error)

	ConfirmPairingWithResponse(ctx context.Context, id openapi_types.UUID, params *ConfirmPairingParams, body ConfirmPairingJSONRequestBody, reqEditors ...RequestEditorFn) (*ConfirmPairingResp, error)

	// DenyPairingWithResponse request
	DenyPairingWithResponse(ctx context.Context, id openapi_types.UUID, params *DenyPairingParams, reqEditors ...RequestEditorFn) (*DenyPairingResp, error)

	// SubmitPairingPubkeyWithBodyWithResponse request with any body
	SubmitPairingPubkeyWithBodyWithResponse(ctx context.Context, id openapi_types.UUID, params *SubmitPairingPubkeyParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SubmitPairingPubkeyResp, error)

	SubmitPairingPubkeyWithResponse(ctx context.Context, id openapi_types.UUID, params *SubmitPairingPubkeyParams, body SubmitPairingPubkeyJSONRequestBody, reqEditors ...RequestEditorFn) (*SubmitPairingPubkeyResp, error)

	// IssuePairingTokenWithResponse request
	IssuePairingTokenWithResponse(ctx context.Context, id openapi_types.UUID, params *IssuePairingTokenParams, reqEditors ...RequestEditorFn) (*IssuePairingTokenResp, error)

	// ListPairingsWithResponse request
	ListPairingsWithResponse(ctx context.Context, params *ListPairingsParams, reqEditors ...RequestEditorFn) (*ListPairingsResp, error)

	// RevokePairingWithResponse request
	RevokePairingWithResponse(ctx context.Context, id string, params *RevokePairingParams, reqEditors ...RequestEditorFn) (*RevokePairingResp, error)

	// CreatePrivilegedActionIntentWithBodyWithResponse request with any body
	CreatePrivilegedActionIntentWithBodyWithResponse(ctx context.Context, params *CreatePrivilegedActionIntentParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CreatePrivilegedActionIntentResp, error)

	CreatePrivilegedActionIntentWithResponse(ctx context.Context, params *CreatePrivilegedActionIntentParams, body CreatePrivilegedActionIntentJSONRequestBody, reqEditors ...RequestEditorFn) (*CreatePrivilegedActionIntentResp, error)

	// GetPrivilegedActionIntentWithResponse request
	GetPrivilegedActionIntentWithResponse(ctx context.Context, id string, params *GetPrivilegedActionIntentParams, reqEditors ...RequestEditorFn) (*GetPrivilegedActionIntentResp, error)

	// PostRegisterWithBodyWithResponse request with any body
	PostRegisterWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostRegisterResp, error)

	PostRegisterWithResponse(ctx context.Context, body PostRegisterJSONRequestBody, reqEditors ...RequestEditorFn) (*PostRegisterResp, error)

	// PostReloginWithBodyWithResponse request with any body
	PostReloginWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostReloginResp, error)

	PostReloginWithResponse(ctx context.Context, body PostReloginJSONRequestBody, reqEditors ...RequestEditorFn) (*PostReloginResp, error)

	// PostRelyingPartyWithBodyWithResponse request with any body
	PostRelyingPartyWithBodyWithResponse(ctx context.Context, params *PostRelyingPartyParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostRelyingPartyResp, error)

	PostRelyingPartyWithResponse(ctx context.Context, params *PostRelyingPartyParams, body PostRelyingPartyJSONRequestBody, reqEditors ...RequestEditorFn) (*PostRelyingPartyResp, error)

	// PostRelyingPartyRotateSecretWithResponse request
	PostRelyingPartyRotateSecretWithResponse(ctx context.Context, id string, params *PostRelyingPartyRotateSecretParams, reqEditors ...RequestEditorFn) (*PostRelyingPartyRotateSecretResp, error)

	// GetOpenidConfigurationWithResponse request
	GetOpenidConfigurationWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetOpenidConfigurationResp, error)

	// GetAuthorizeWithResponse request
	GetAuthorizeWithResponse(ctx context.Context, params *GetAuthorizeParams, reqEditors ...RequestEditorFn) (*GetAuthorizeResp, error)

	// PostDeviceAuthorizationWithBodyWithResponse request with any body
	PostDeviceAuthorizationWithBodyWithResponse(ctx context.Context, params *PostDeviceAuthorizationParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostDeviceAuthorizationResp, error)

	PostDeviceAuthorizationWithResponse(ctx context.Context, params *PostDeviceAuthorizationParams, body PostDeviceAuthorizationJSONRequestBody, reqEditors ...RequestEditorFn) (*PostDeviceAuthorizationResp, error)

	PostDeviceAuthorizationWithFormdataBodyWithResponse(ctx context.Context, params *PostDeviceAuthorizationParams, body PostDeviceAuthorizationFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostDeviceAuthorizationResp, error)

	// GetJWKSWithResponse request
	GetJWKSWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetJWKSResp, error)

	// PostTokenWithBodyWithResponse request with any body
	PostTokenWithBodyWithResponse(ctx context.Context, params *PostTokenParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostTokenResp, error)

	PostTokenWithFormdataBodyWithResponse(ctx context.Context, params *PostTokenParams, body PostTokenFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostTokenResp, error)

	// GetUserinfoWithResponse request
	GetUserinfoWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetUserinfoResp, error)
}

type CompleteOIDCAuthRequestParams struct {
	// XRequestID Optional client-supplied correlation identifier.
	XRequestID *XRequestID `json:"X-Request-ID,omitempty"`

	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type CompleteOIDCAuthRequestResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *OIDCAuthRequestCompletionResponse
	ApplicationproblemJSON400 *BadRequest
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON409 *Conflict
	ApplicationproblemJSON410 *Gone
	ApplicationproblemJSON429 *TooManyRequests
}

type ConfirmPairingJSONRequestBody = PairingTransactionConfirmRequest

type ConfirmPairingParams struct {
	// XRequestID Optional client-supplied correlation identifier.
	XRequestID *XRequestID `json:"X-Request-ID,omitempty"`

	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type ConfirmPairingResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	ApplicationproblemJSON400 *BadRequest
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON409 *Conflict
	ApplicationproblemJSON410 *Gone
	ApplicationproblemJSON429 *TooManyRequests
}

type Conflict = ProblemDetails

type CreatePrivilegedActionIntentJSONRequestBody = PrivilegedActionIntentCreateRequest

type CreatePrivilegedActionIntentParams struct {
	// XRequestID Optional client-supplied correlation identifier.
	XRequestID *XRequestID `json:"X-Request-ID,omitempty"`

	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type CreatePrivilegedActionIntentResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON201                   *PrivilegedActionIntentResponse
	ApplicationproblemJSON400 *BadRequest
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON409 *Conflict
	ApplicationproblemJSON429 *TooManyRequests
	ApplicationproblemJSON502 *BadGateway
	ApplicationproblemJSON503 *ServiceUnavailable
}

type DPoPHeader = string

type DeleteDeviceParams struct {
	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type DeleteDeviceResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON409 *Conflict
	ApplicationproblemJSON429 *TooManyRequests
}

type DenyDeviceAuthorizationJSONRequestBody = DeviceAuthorizationApproveRequest

type DenyDeviceAuthorizationParams struct {
	// XRequestID Optional client-supplied correlation identifier.
	XRequestID *XRequestID `json:"X-Request-ID,omitempty"`

	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type DenyDeviceAuthorizationResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	ApplicationproblemJSON400 *BadRequest
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON409 *Conflict
	ApplicationproblemJSON410 *Gone
	ApplicationproblemJSON429 *TooManyRequests
}

type DenyPairingParams struct {
	// XRequestID Optional client-supplied correlation identifier.
	XRequestID *XRequestID `json:"X-Request-ID,omitempty"`

	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type DenyPairingResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON409 *Conflict
	ApplicationproblemJSON410 *Gone
	ApplicationproblemJSON429 *TooManyRequests
}

type Device struct {
	ApnsEnvironment       *DeviceApnsEnvironment `json:"apns_environment,omitempty"`
	AppId                 string                 `json:"app_id"`
	AttestationType       DeviceAttestationType  `json:"attestation_type"`
	AttestationVerifiedAt *time.Time             `json:"attestation_verified_at,omitempty"`
	CreatedAt             time.Time              `json:"created_at"`
	DeviceName            *string                `json:"device_name,omitempty"`
	DeviceType            DeviceDeviceType       `json:"device_type"`
	Id                    openapi_types.UUID     `json:"id"`
	LastUsedAt            *time.Time             `json:"last_used_at,omitempty"`
	RevokedAt             *time.Time             `json:"revoked_at,omitempty"`
}

type DeviceApnsEnvironment string

type DeviceAttestationType string

type DeviceAuthorizationApproveRequest struct {
	// UserCode User-facing code shown by the device authorization flow.
	UserCode string `json:"user_code"`
}

type DeviceAuthorizationClaimResponse struct {
	// AutoApproved True when the device-authorization was auto-approved server-side
	// because the originating relying party is marked `trusted` in the
	// auth seed (first-party services such as `naughtbot-captcha-rp` and
	// `naughtbot-console-rp`). When true, the device-code state is
	// already `approved` and the client must not call
	// `/api/v1/device-authorizations/approve`. Absent or false means the
	// mobile app must render the normal Approve/Deny consent UI.
	AutoApproved *bool     `json:"auto_approved,omitempty"`
	ClientId     string    `json:"client_id"`
	ClientName   string    `json:"client_name"`
	ExpiresAt    time.Time `json:"expires_at"`
	Origin       *string   `json:"origin,omitempty"`

	// RequesterOrigin Downstream browser RP origin for `/login?id=...` device-code
	// bridge approvals. Mobile uses this to keep the approval flow
	// attached to the post-auth pairing transaction; endpoint key
	// recognition still happens inside the pairing flow.
	RequesterOrigin *string `json:"requester_origin,omitempty"`
}

type DeviceAuthorizationRequest struct {
	// AuthRequestId Stored OIDC auth-request id when the first-party `naughtbot-login`
	// device-code bridge is authenticating a browser RP request. Native
	// clients that are not completing `/login?id=...` omit this field;
	// the auth server ignores it for all other device-code clients.
	AuthRequestId *string `json:"auth_request_id,omitempty"`
	ClientId      string  `json:"client_id"`

	// Origin Requester origin. Required for origin-bound browser clients and
	// omitted by native CLI-shaped clients.
	Origin *string `json:"origin,omitempty"`

	// Scope Space-separated initial scopes. Browser Sign in clients request `openid mailbox:pairing:start`; CLI-shaped clients request `mailbox:pairing:start`; add `offline_access` only for long-lived refresh semantics. `mailbox:request` is rejected.
	Scope string `json:"scope"`
}

type DeviceAuthorizationResponse struct {
	DeviceCode              string  `json:"device_code"`
	ExpiresIn               int     `json:"expires_in"`
	Interval                int     `json:"interval"`
	UserCode                string  `json:"user_code"`
	VerificationUri         string  `json:"verification_uri"`
	VerificationUriComplete *string `json:"verification_uri_complete,omitempty"`
}

type DeviceAuthorizationStatusResponse struct {
	ExpiresAt time.Time                               `json:"expires_at"`
	Status    DeviceAuthorizationStatusResponseStatus `json:"status"`
}

type DeviceAuthorizationStatusResponseStatus string

type DeviceDeviceType string

type DeviceList struct {
	Devices []Device `json:"devices"`
}

type Forbidden = ProblemDetails

type GetAttestedKeyConfigResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *AttestedKeyConfig
	ApplicationproblemJSON429 *TooManyRequests
}

type GetAuthorizeParams struct {
	ClientId     string                         `form:"client_id" json:"client_id"`
	RedirectUri  string                         `form:"redirect_uri" json:"redirect_uri"`
	ResponseType GetAuthorizeParamsResponseType `form:"response_type" json:"response_type"`

	// Scope Space-separated scope list for authorization-code clients. Browser Sign in clients request `openid mailbox:pairing:start`; include `offline_access` only when a long-lived refresh family is needed.
	Scope string `form:"scope" json:"scope"`

	// DpopJkt Base64url SHA-256 JWK thumbprint of the browser DPoP key that must match the later `/oauth/token` proof.
	DpopJkt             string                                `form:"dpop_jkt" json:"dpop_jkt"`
	State               *string                               `form:"state,omitempty" json:"state,omitempty"`
	Nonce               *string                               `form:"nonce,omitempty" json:"nonce,omitempty"`
	CodeChallenge       string                                `form:"code_challenge" json:"code_challenge"`
	CodeChallengeMethod GetAuthorizeParamsCodeChallengeMethod `form:"code_challenge_method" json:"code_challenge_method"`
	Prompt              *string                               `form:"prompt,omitempty" json:"prompt,omitempty"`
}

type GetAuthorizeParamsCodeChallengeMethod string

type GetAuthorizeParamsResponseType string

type GetAuthorizeResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	ApplicationproblemJSON400 *BadRequest
	ApplicationproblemJSON429 *TooManyRequests
}

type GetChallengeResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *ChallengeResponse
	ApplicationproblemJSON429 *TooManyRequests
}

type GetDeviceAuthorizationStatusParams struct {
	// XRequestID Optional client-supplied correlation identifier.
	XRequestID *XRequestID `json:"X-Request-ID,omitempty"`
}

type GetDeviceAuthorizationStatusResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *DeviceAuthorizationStatusResponse
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON429 *TooManyRequests
}

type GetDeviceParams struct {
	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type GetDeviceResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *Device
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON429 *TooManyRequests
}

type GetJWKSResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *JWKS
	ApplicationproblemJSON429 *TooManyRequests
}

type GetMeParams struct {
	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type GetMeResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *MeResponse
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON429 *TooManyRequests
}

type GetOpenidConfigurationResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *OpenIDConfiguration
	ApplicationproblemJSON429 *TooManyRequests
}

type GetPairingTransactionParams struct {
	// WaitSeconds Optional bounded long-poll wait. When set, auth waits up to this
	// many seconds (clamped to 25) for the pairing transaction to leave
	// its current pending state before returning the latest status.
	WaitSeconds *int `form:"wait_seconds,omitempty" json:"wait_seconds,omitempty"`

	// XRequestID Optional client-supplied correlation identifier.
	XRequestID *XRequestID `json:"X-Request-ID,omitempty"`

	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type GetPairingTransactionResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *PairingTransaction
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON429 *TooManyRequests
}

type GetPrivilegedActionIntentParams struct {
	WaitSeconds *int `form:"wait_seconds,omitempty" json:"wait_seconds,omitempty"`

	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type GetPrivilegedActionIntentResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *PrivilegedActionIntentResponse
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON409 *Conflict
	ApplicationproblemJSON429 *TooManyRequests
	ApplicationproblemJSON502 *BadGateway
}

type GetUserinfoResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *UserInfoResponse
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON429 *TooManyRequests
}

type Gone = ProblemDetails

type HttpRequestDoer interface {
	Do(req *http.Request) (*http.Response, error)
}

type IssuePairingTokenParams struct {
	// XRequestID Optional client-supplied correlation identifier.
	XRequestID *XRequestID `json:"X-Request-ID,omitempty"`

	// DPoP DPoP proof JWT per RFC 9449 §4. The server validates `htm`, `htu`,
	// `iat`, `jti`, `typ=dpop+jwt`, `alg` (must be ES256), and the embedded
	// `jwk`. For protected routes, the proof's JWK thumbprint must equal
	// the token's server-side DPoP binding metadata.
	DPoP DPoPHeader `json:"DPoP"`
}

type IssuePairingTokenResp struct {
	Body                      []byte
	HTTPResponse              *http.Response
	JSON200                   *TokenResponse
	ApplicationproblemJSON401 *Unauthorized
	ApplicationproblemJSON403 *Forbidden
	ApplicationproblemJSON404 *NotFound
	ApplicationproblemJSON409 *Conflict
	ApplicationproblemJSON410 *Gone
	ApplicationproblemJSON429 *TooManyRequests
}

type JWK struct {
	Alg *string `json:"alg,omitempty"`

	// Crv Curve identifier (e.g. P-256, Ed25519).
	Crv *string `json:"crv,omitempty"`

	// E Base64url RSA exponent.
	E   *string `json:"e,omitempty"`
	Kid *string `json:"kid,omitempty"`
	Kty JWKKty  `json:"kty"`

	// N Base64url RSA modulus.
	N   *string `json:"n,omitempty"`
	Use *string `json:"use,omitempty"`

	// X Base64url(big-endian X coordinate) for EC; base64url public key for OKP.
	X *string `json:"x,omitempty"`

	// Y Base64url(big-endian Y coordinate) for EC.
	Y                    *string                `json:"y,omitempty"`
	AdditionalProperties map[string]interface{} `json:"-"`
}